--- title: 'Senior Cloud Security Engineer at Bloomreach' canonical: 'https://feeny.ai/job/senior-cloud-security-engineer-bloomreach-slovakia-8szf0gz5a8td' type: 'job' last_seen: '2026-10-14' --- # Senior Cloud Security Engineer at Bloomreach - **Company:** Bloomreach - **Location:** Slovakia - **Compensation:** €38k–€48k - **Posted:** 2026-10-01 - **Last confirmed live:** 2026-10-14 - **Apply:** https://job-boards.greenhouse.io/bloomreach/jobs/8247118 ## Job description Bloomreach is building the world’s premier agentic platform for personalization.We’re revolutionizing how businesses connect with their customers, building and deploying AI agents to personalize the entire customer journey. - We're taking autonomous search mainstream, making product discovery more intuitive and conversational for customers, and more profitable for businesses. - We’re making conversational shopping a reality, connecting every shopper with tailored guidance and product expertise — available on demand, at every touchpoint in their journey. - We're designing the future of autonomous marketing, taking the work out of workflows, and reclaiming the creative, strategic, and customer-first work marketers were always meant to do. And we're building all of that on the intelligence of a single AI engine — Loomi — so that personalization isn't only autonomous…it's also consistent.From retail to financial services, hospitality to gaming, businesses use Bloomreach to drive higher growth and lasting loyalty. We power personalization for more than 1,400 global brands, including American Eagle, Sonepar, and Pandora. ## About the Role You will serve as a trusted security partner to Engineering, DevOps, and IT, designing and hardening secure AWS environments, securing our containerized and Linux-based workloads, and protecting our corporate infrastructure and identity/access tooling — while partnering closely with our dedicated SOC team on detection and response. You will act as a key member of the Cloud Security team, owning cloud and corporate infrastructure security architecture, vulnerability remediation, and Splunk administration and data integration, in close partnership with the SOC team, which owns detection content, alerting, playbooks, and incident triage/response. Your Job Will Be (but not limited to) - Design, implement, and monitor security controls across our AWS cloud infrastructure, applying platform-native services (e.g., IAM, GuardDuty, Security Hub, KMS, VPC/Security Groups, Config) and secure architecture patterns to protect production environments. - Maintain deep working knowledge of the AWS security service landscape, evaluating new and existing services to close coverage gaps and strengthen our security architecture. - Secure our Linux server fleet and containerized workloads (Docker, Kubernetes), including host hardening, image and runtime security, and Kubernetes cluster and workload configuration. - Own the security of our corporate infrastructure, including security configuration and administration of identity and access tooling such as JumpCloud and zero-trust network access tooling such as Twingate. - Administer and integrate Splunk as a data platform — onboarding new log sources, maintaining data pipelines, and supporting platform health and licensing — in partnership with the SOC team, which owns detection content, alerting logic, and playbooks. - Identify, triage, and drive remediation of infrastructure and web application vulnerabilities, partnering with engineering teams to reduce MTTR and improve remediation rates. - Lead CVE lifecycle management and patching efforts, performing root cause analysis and tracking remediation metrics across cloud, corporate, and on-prem systems. - Build and maintain secure automation and tooling for vulnerability remediation and infrastructure hardening using Python, Go, or Bash or similar scripting languages. - Implement security guardrails and policy-as-code within Infrastructure as Code (IaC) and CI/CD pipelines, performing static IaC scanning and enforcing security baselines prior to deployment. - Define logging and telemetry requirements for cloud, container, and corporate infrastructure assets, ensuring the SOC team has the data coverage needed for effective detection. - Develop, document, and operationalize security architecture standards for cloud, container, and corporate infrastructure, partnering with engineering pillars and IT to drive adoption across the organization. - Partner with the SOC team on incident response as a technical subject-matter expert for cloud, container, and corporate infrastructure - Mentor junior security engineers and prioritize security initiatives based on risk and business impact, driving continuous improvement of the organization's cloud and corporate infrastructure security posture. Professional Experience and Skills Requirements - 6+ years of hands-on experience in cybersecurity engineering, with a focus on cloud security, infrastructure security, and system hardening. - Deep, hands-on experience securing AWS environments, including secure architecture design, IAM, and applying native AWS security services (e.g., GuardDuty, Security Hub, KMS, Config, Inspector). - Strong working knowledge of Linux system administration and hardening, and hands-on experience securing containerized environments (Docker and Kubernetes). - Experience securing corporate infrastructure and identity/access tooling, such as JumpCloud, Twingate, or comparable zero-trust/IAM platforms. - Experience administering and integrating Splunk (or comparable data/SIEM platforms) as a log and data pipeline, including onboarding data sources and maintaining platform health. - Demonstrated ownership of the vulnerability and CVE lifecycle, including triage, root cause analysis, patching, and MTTR/remediation-rate reporting. - Proficiency in scripting and automation (Python, Go, or Bash) to build or extend security tooling for hardening and remediation. - Experience implementing policy-as-code and security guardrails within CI/CD pipelines, including static IaC scanning and pre-deployment security baselines. - Working knowledge of common security frameworks (CIS, NIST) and typical weaknesses exploited in infrastructure, containers, and web applications. - Strong cross-functional communication skills, with experience partnering closely with SOC, engineering, and IT teams on shared security outcomes. - Experience mentoring junior engineers and prioritizing security work based on risk and business impact. - Relevant certifications preferred: AWS Certified Security – Specialty, Certified Kubernetes Security Specialist (CKS), CISSP, CCSP, or CCSK. ## Your Success Story Will Be In the First 30 Days - Develop a foundational understanding of Bloomreach's AWS environment, corporate infrastructure, and existing security controls, including JumpCloud and Twingate configurations. - Become familiar with the Cloud Security team's tooling, current Splunk data integrations, and how the team partners with the SOC on detection coverage. - Review current CVE/vulnerability management processes, IaC pipelines, and security baselines for cloud, container, and Linux environments. - Establish working relationships with Engineering, DevOps, IT, and the SOC team. - Identify quick-win opportunities to strengthen existing hardening, IaC guardrails, or corporate infrastructure configurations. In the First 60 Days - Independently triage and drive remediation of infrastructure, container, and web vulnerabilities identified through scanning and assessments. - Onboard at least one new data source into Splunk and contribute to maintaining existing data pipelines. - Contribute to IaC security scanning and policy-as-code enforcement within CI/CD pipelines. - Partner with Engineering and IT to close CVE and patching gaps, tracking MTTR and remediation-rate metrics. - Begin mentoring junior team members on cloud and infrastructure security fundamentals. In the First 90 Days - Own end-to-end security architecture reviews for at least one major AWS workload or corporate infrastructure system, independently identifying risks and driving mitigations. - Demonstrate hands-on ownership of Linux, container, and Kubernetes security hardening for at least one environment. - Propose improvements to security architecture standards or automation based on observed gaps. - Demonstrate consistent ownership of vulnerability and CVE lifecycle management with minimal supervision. - Actively mentor junior engineers and contribute to prioritization of the team's security roadmap. ## #LI-HO1 The pay range actually offered will take into account a variety of potential factors considered in compensation, including but not limited to skills, qualifications, geographic location, accomplishments, experience, credentials, internal equity and business needs, and may vary from the range listed above. Base Salary Range €38.095—€47.619 EUR More things you'll like about Bloomreach: Culture: - A great deal of freedom and trust. At Bloomreach we don’t clock in and out, and we have neither corporate rules nor long approval processes. This freedom goes hand in hand with responsibility. We are interested in results from day one. - We have defined our [5 values](https://www.bloomreach.com/en/careers?utm_source=Job-Description-Footer&utm_medium=Job-Description&utm_content=Hyperlink-1) and the 10 underlying key behaviors that we strongly believe in. We can only succeed if everyone lives these behaviors day to day. We've embedded them in our processes like recruitment, onboarding, feedback, personal development, performance review and internal communication. - We believe in flexible working hours to accommodate your working style. - We work virtual-first with several Bloomreach Hubs available across three continents. - We organize company events to experience the global spirit of the company and get excited about what's ahead. - We encourage and support our employees to engage in volunteering activities - every Bloomreacher can take 5 paid days off to volunteer*. - The [Bloomreach Glassdoor page](https://www.glassdoor.com/Overview/Working-at-Bloomreach-EI_IE442167.11,21.htm) elaborates on our stellar 4.7/5 rating. The [Bloomreach Comparably page](https://www.comparably.com/companies/bloomreach) Culture score is even higher at 4.9/5 Personal Development: - We have a People Development Program - participating in personal development workshops on various topics run by experts from inside the company. We are continuously developing & updating competency maps for select functions. - Our resident communication coach [Ivo Večeřa](https://www.linkedin.com/in/ivo-ve%C4%8De%C5%99a-2a94291/) is available to help navigate work-related communications & decision-making challenges.* - Our managers are strongly encouraged to participate in the Leader Development Program to develop in the areas we consider essential for any leader. The program includes regular comprehensive feedback, consultations with a coach and follow-up check-ins. - Bloomreachers utilize the $1,500 professional education budget on an annual basis to purchase education products (books, courses, certifications, etc.)* Well-being: - The Employee Assistance Program -- with counselors -- is available for non-work-related challenges.* - Subscription to Calm - sleep and meditation app.* - We organize ‘DisConnect’ days where Bloomreachers globally enjoy one additional day off each quarter, allowing us to unwind together and focus on activities away from the screen with our loved ones. - We facilitate sports, yoga, and meditation opportunities for each other. - Extended parental leave up to 26 calendar weeks for Primary Caregivers.* Compensation: - Restricted Stock Units or Stock Options are granted depending on a team member’s role, seniority, and location.* - Everyone gets to participate in the company's success through the company performance bonus.* - We offer an employee referral bonus of up to $3,000! - We reward & celebrate work anniversaries -- Bloomversaries!* (*Subject to employment type. Interns are exempt from marked benefits, usually for the first 6 months.) Excited? Join us and transform the future of commerce experiences! If this position doesn't suit you, but you know someone who might be a great fit, share it - we will be very grateful! Any unsolicited resumes/candidate profiles submitted through our website or to personal email accounts of employees of Bloomreach are considered property of Bloomreach and are not subject to payment of agency fees. #LI-Remote ## About Bloomreach ## Company Overview - **One-liner**: Bloomreach is the world’s #1 Commerce Experience Cloud, providing an AI-powered platform that unifies search, content, personalization, customer data, and conversational shopping to drive magical and measurable ecommerce experiences. - **Entity Type**: Private (valued at $2.2 billion as of 2024, with $325M+ in total funding from investors including Goldman Sachs Asset Management and Sixth Street Growth) - **Headquarters**: Not publicly available (remote-first company with offices in the US, Europe, India, and other global locations) - **Founded**: 2009 - **Founders**: Raj De Datta and Ashutosh Garg ## Core Business - **Primary industry**: Ecommerce software / Digital Commerce Experience Cloud - **Target customers**: B2B – primarily enterprise and mid-market brands (1,400+ global brands), with strong focus on retailers, DTC brands, and B2B commerce companies - **Mission**: “Our mission is to drive magical and measurable experiences for people and businesses.” ## Products & Services - **Bloomreach Discovery**: AI-driven site search and merchandising product that delivers relevant results across search, facet navigation, and product recommendations, powered by machine learning. - **Bloomreach Engagement (formerly Exponea)**: Customer Data and Experience Platform (CDXP) that unifies real-time customer and product data to power personalized campaigns across email, web, mobile, and ads. - **Bloomreach Content (formerly Hippo)**: Web content management system (CMS) integrated with the commerce platform, enabling marketers to create and manage content alongside search and personalization. - **Bloomreach Clarity**: AI-powered conversational shopping product that lets customers interact naturally via chat or voice to find products and complete purchases. - **Radiance Commerce** (acquired): Conversational AI technology integrated into the platform. ## Market Standing - **Valuation**: $2.2 billion (as of 2024, following a $175M funding round) [bloomreach.com] - **Key Metric**: Annual Recurring Revenue (ARR) surpassed $150 million at the end of 2022 [bloomreach.com] - **Total Funding**: Over $325 million (at least $150M from Sixth Street Growth in 2021, plus $175M led by Goldman Sachs Asset Management in 2024) - **Notable Investors/Partners**: Goldman Sachs Asset Management, Sixth Street Growth; technology partnerships with Google Cloud Vertex AI and NVIDIA (announced 2024) - **Growth Signals**: - Powers the equivalent of 25% of all ecommerce experiences in the US and UK - Handles 250 million searches daily and executes 100,000 email campaigns each day - Serves 1,400+ global brands - 900+ employees globally (as of 2024) - Multiples of valuation growth within one year (to $2.2B) - Acquisitions of Exponea, Hippo, and Radiance Commerce expanded product portfolio ## Competitive Advantages - **Unified platform**: Combines search, content, CDP, and personalization on one AI-native stack – a rare combination in the ecommerce space. - **Scale & reach**: The platform processes massive volumes of commerce data (250M searches/day, 25% of US/UK ecommerce) providing strong data network effects. - **AI/ML patents**: Proprietary AI/ML technology patented over the years, differentiating from legacy point solutions. - **Deep integrations**: Partnerships with Google Cloud and NVIDIA bring cutting-edge infrastructure and AI capabilities. - **Open-source roots**: Through the Hippo acquisition, Bloomreach has a strong content management foundation with an open-source pedigree. ## Strategic Focus - **AI-first innovation**: Continued investment in generative AI and conversational commerce (Clarity product) to transform shopping experiences. - **Platform breadth**: Deepening cross-product integration to offer the “Commerce Experience Cloud” as a single solution, reducing vendor sprawl for customers. - **Global expansion**: Growing presence in APAC (senior roles in India, Australia) and EMEA. - **Ecosystem partnerships**: Leveraging the Google Cloud and NVIDIA partnerships to accelerate AI capabilities and reach new enterprise customers. ## Why Work Here - **Remote-first culture**: Bloomreach explicitly states “productive work can take place anywhere” and offers flexibility to work fully remote or from one of its global offices [bloomreach.com/careers]. - **Ownership & compensation**: All employees receive stock equity grants (OWNership mindset) and participate in a semi-annual company performance bonus [bloomreach.com/careers]. - **Career development**: Leadership development program for managers, annual education budget (books, courses, certifications), and a resident coach for personal/professional challenges [bloomreach.com/careers]. - **Work-life balance**: Quarterly “DisConnect Days” where the entire company shuts down to recharge [bloomreach.com/careers]. - **Culture values**: “Own,” “Think,” “We,” “No Drama,” “Truth” – emphasizing ownership, cross-functional collaboration, transparency, and a growth mindset [bloomreach.com/careers]. - **Engineering culture**: Engineers are described as “the backbone of our product” and the company hires for potential and passion, not just skills. Teams are organized around product pillars (discovery, content, engagement) and support functions [bloomreach.com/careers]. ## Sources 1. [bloomreach.com/careers](https://www.bloomreach.com/en/careers) 2. [bloomreach.com](https://www.bloomreach.com/en) 3. [bloomreach.com/about-us](https://www.bloomreach.com/en/about-us) 4. [bloomreach.com/leadership-team](https://www.bloomreach.com/en/about-us/leadership-team) 5. [linkedin.com/company/bloomreach](https://www.linkedin.com/company/bloomreach) ## Other roles at Bloomreach - [Senior Business Development Representative (BeNeLux)](https://feeny.ai/job/senior-business-development-representative-benelux-bloomreach-the-6yjxbs067cdn) — The, Netherlands - [Customer Success Manager](https://feeny.ai/job/customer-success-manager-bloomreach-united-kingdom-swhjs1q2ee9c) — United Kingdom - [Strategic Account Executive (MENA)](https://feeny.ai/job/strategic-account-executive-mena-bloomreach-united-arab-emirates-d62g8mpgk3dp) — United Arab Emirates - [Senior Technical Consultant, Partners](https://feeny.ai/job/senior-technical-consultant-partners-bloomreach-united-states-x9dpxac7d0v8) — United States - [Quality Assurance Engineer II](https://feeny.ai/job/quality-assurance-engineer-ii-bloomreach-czechia-4tb0xs7nvhme) — Czechia - [Quality Assurance Engineer II](https://feeny.ai/job/quality-assurance-engineer-ii-bloomreach-slovakia-bg7jw2vn354d) — Slovakia - [Senior Cloud Security Engineer](https://feeny.ai/job/senior-cloud-security-engineer-bloomreach-czechia-3z2h6a3bdhgn) — Czechia - [Partner Services Manager](https://feeny.ai/job/partner-services-manager-bloomreach-united-kingdom-ezjt565tjsa0) — United Kingdom - [Revenue Operations Analyst](https://feeny.ai/job/revenue-operations-analyst-bloomreach-slovakia-en4fkbvyx7jz) — Slovakia - [Senior Incident & Problem Manager](https://feeny.ai/job/senior-incident-problem-manager-bloomreach-czechia-qq881h9x8sd0) — Czechia